What you need to do after a Windows Server installation

One, run the Windows Update installation update

Tips:

1. If you are staying in the "Checking for updates", please refer to https://answers.microsoft.com/zh-hans/windows/forum/windows8_1-update/windows/ C3cf00b3-badd-4e8e-8e87-30a0b822d6a1?auth=1
2. Check to see if "KB971033" is included in the important update and remove if any. For more information on this patch, please refer to: http://www.cnblogs.com/xiaohi/p/6821425.html

Second, change the local security policy

1. Run Secpol.msc or go to the Control Panel \ System and security \ Administrative tools to open the local security policy and Delete Two of the contents:

2. Restrict the operation of the specified path to the software:

3. Enable the following two items:

Third, disable some services

1. Run the services in Control Panel \ System and security \ Administrative Tools;
2. Disable the following services:

• Print Spooler(load the file into memory for printing later)
• Server(This computer supports file, print, and named pipes sharing over the network ...). ）
• remoteregistry(enables remote users to modify registry settings on this computer.) If this service is terminated, only users on this computer can modify the registry. ）
• Distributed Link Trackingclient (enables the client program to track the movement of linked files, including moving within the same NTFS volume, moving to another NTFS on the same computer, or NTFS on another computer.) If this service is disabled, links on this computer will not be maintained or tracked. ）

Four, enable Windows Defender

1. Click Start, point to Administrative Tools, and then click Server Manager.
2. In Server Manager, click Features, and then, in the Server Manager details pane, under Features Summary, click Add Features.
3. The Add Features Wizard starts.
4. In the Features list, select Desktop Experience, and then click Install.

V. Modifying remote ports and related settings

1, according to guidelines, modify the remote port;

2. Modify the firewall RDP protocol default port:

Vi. changing the built-in Administrator user name

1. Change the default administrator user name to another character;
2. Create a administrator user so that it does not belong to any group.

Seven, activation system eight, install the memory disk software, and download the installation program to the memory disk, and then install common software and collocation environment.

What you need to do after a Windows Server installation